473,320 Members | 1,948 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

Hijacked Domains!

Hello Everyone. I'm new to this forum (and to forums in general) so please be kind to me - I have a lot to learn.

My immediate problem is that some of my domains appear to have been "hijacked". More specifically, when I type in the address (www.dendroco.com is an example), I get a page offering vitamins and other junk. I am sure that this is due to some trickery having been introduced to my PC because friends don't get the same result.

The domains in question don't have active web sites but they have been set up on 'Google Apps for Domains' (maybe a clue there). I did some sleuthing and the Firefox error console logs this:

Warning: Expected declaration but found '100%'. Skipped to next declaration.
Source File: http://www.dendroco.com/css/w01/t101.css?def=Akamai%3aHostingURL%3dhttp%3a%2f%2fi. nuseek.com%7cBdyStyl%3aPageBackgroundColor%
(plus several dozen characters related to the link which I haven't pasted)

Any ideas or suggestions anyone? I would be most grateful ....
Sep 22 '07 #1
4 2338
pbmods
5,821 Expert 4TB
Heya, John.

You might have a spyware problem. LavaSoft's free Ad-Aware does a fantastic job of removing spyware.
Sep 22 '07 #2
Ah, yes. Forgive me: I neglected to mention that I have run numerous spyware / virus / trojan, etc., detection and removal programs, including Ad-Aware 2007, Spybot S&D, AVG anti-spyware, AVG rootkit, SpywareBlaster and Ad-Watch but to no avail.
Sep 22 '07 #3
oddjob
7
I see you have already used several respected infection cleaners but, if you haven't run these already, then do so now .....

Superantispyware > http://www.superantispyware.com/

TrojanHunter > http://www.misec.net/

Download each, update them to the latest definitions, and have them run full scans on your entire systems on their default settings.

Let them fix whatever they find.


ComboFix >
http://download.bleepingcomputer.com...a/ComboFix.exe

Double click combofix.exe & follow the prompts.

Note >> Do not mouseclick combofix's window while it's running. That may cause it to stall.

When finished, it will produce a log for you. The report is called ComboFix.txt. Remember where that report is saved on your computer.

Post that log in your next reply along with a HijackThis log AND an update on how the computer is operating now.


OJ
Sep 25 '07 #4
Nepomuk
3,112 Expert 2GB
Hello Everyone. I'm new to this forum (and to forums in general) so please be kind to me - I have a lot to learn.

My immediate problem is that some of my domains appear to have been "hijacked". More specifically, when I type in the address (www.dendroco.com is an example), I get a page offering vitamins and other junk. I am sure that this is due to some trickery having been introduced to my PC because friends don't get the same result.

The domains in question don't have active web sites but they have been set up on 'Google Apps for Domains' (maybe a clue there). I did some sleuthing and the Firefox error console logs this:

Warning: Expected declaration but found '100%'. Skipped to next declaration.
Source File: http://www.dendroco.com/css/w01/t101.css?def=Akamai%3aHostingURL%3dhttp%3a%2f%2fi. nuseek.com%7cBdyStyl%3aPageBackgroundColor%
(plus several dozen characters related to the link which I haven't pasted)

Any ideas or suggestions anyone? I would be most grateful ....
Have you checked that site with several Browsers or just with Firefox? (If not: do so!) Are you using a Proxy? (Check that, just to make sure.) Is that Proxy, if you're using one, trustworthy? (Private proxy or public proxy - if public, which one?) Is the site displayed correctly, when using this link? Do other computers use the same Internet line and if so, do they get the same page displayed?

Greetings,
Nepomuk
Sep 25 '07 #5

Sign in to post your reply or Sign up for a free account.

Similar topics

1
by: d.schulz81 | last post by:
Hi all, We have about 10 different domains that are linked very closely and we want to identify and keep track of every single user that surfs our websites by the use of sessions. The problem...
7
by: | last post by:
I think I may have a problem with the user of cookies in my centralized logon and registration system that I hoped could be consumed by all the sub-domains on my remote host IP. I built the...
1
by: Silver Arrow | last post by:
Iframe ReturnValue returns undefined if domains are not the same I am using a modal window and an iFrame to try and pull a return value back. IMPORTANT : I am doing this across domains. Main...
6
by: onetitfemme | last post by:
Domain are very cheap now adays. What would be the pros and cons of using different hosts served from the same server, say: www.blogyourbrainoff.com and www.yourbusiness.com
1
by: barbaraJacob | last post by:
Hi everyone! Must deliver my project tomorrow....It's nearly finished. I've set up a website to be published in 3 different domains. - same webserver (I mean physically the same machine) -...
1
by: Paul Fi | last post by:
I have some confusions about the two, is it possible to create threads inside a particular domain and have other threads created in another domain or do we create threads that will manipulate app...
3
by: Marc Eggenberger | last post by:
Hi there. I have the following environment: Active Directory running on Windows 2000. There is a root domain called ad.sys and within this root domain there are the following subdomains: ...
6
by: Ludvig | last post by:
I have various domains using the same application/assembly They differ in contents and design, based on a "site id", and get its information from an SQL server. Now I have to deploy the...
7
by: Doug | last post by:
An ASP.NET session cookie set on "www.mydomain.com" can not be accessed on "search.mydomain.com"; hence, a new session and cookie are being created on every sub-domain. This is occuring because...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
0
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.